Hacker News new | ask | show | jobs
by jakear 2175 days ago
Further, if I can destroy all keys do I even need to revoke the cert? (Honest question, I’m actually not sure)
1 comments

Revocation is required by policy, so the question is technically moot. It’s generally good practice to generate and publish a revocation prior to destroying a private key, though.

To provide an analogy in the context of PGP keys, if an attacker somehow finds a backup of your revoked and destroyed private key someday, they will have trouble using it because your revocation will be public and on record.